Mmastodon TechnologyCybersecurity first seen 21 h ago, last 21 h ago, peak #11

HortusFox patches SQL injection flaw in versions before 6.2

Original: 🚨 EUVD-2026-95791 📊 Score: 7.1/10 (CVSS v3.1) 📦 Product: hortusfox-web 🏢 Vendor: danielbrendel 📅 Updated: 2026-10-09 📝 H

A medium-severity SQL injection vulnerability, tracked as EUVD-2026-95791 with a CVSS score of 7.1, has been disclosed in HortusFox (hortusfox-web), the self-hosted plant management application by developer danielbrendel. Versions before 6.2 allow API token holders to inject SQL through a crafted include_info parameter. Users are advised to update to 6.2 or later.

Why now: Self-hosted application users and security watchers are being alerted to the newly disclosed vulnerability and the available fix.

HortusFoxdanielbrendelEUVD-2026-95791

Open on mastodon →

Evidence

• 🚨 EUVD-2026-95791 📊 Score: 7.1/10 (CVSS v3.1) 📦 Product: hortusfox-web 🏢 Vendor: danielbrendel 📅 Updated: 2026-10-09 📝 HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted include_info… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1627862